PDPL Compliance Lead — Personal Data Protection

exequt MENA; Riyadh; On-site; SAR 250,000 - 420,000; Full time

Job summary

ExeQut is seeking a Personal Data Protection Officer to lead the implementation of the Saudi PDPL and related regulations across the organization, ensuring robust protection of individuals' personal data and ongoing regulatory compliance with national and sectoral requirements.

You will build and maintain RoPA, data inventories and flows, draft privacy policies in Arabic and English, coordinate with IT, security, compliance, legal and business units, and support DPIA processes, incidents, and

Qualifications

• Bachelor's degree in law/Sharia with law track or IT-related discipline.
• 4–7 years of relevant experience in privacy, governance, compliance, or related fields.
• Experience with Saudi PDPL and SDAIA controls.
• Ability to draft policies in Arabic and English and interact with regulators.

Responsibilities

• Lead the personal data protection program and ensure PDPL compliance.
• Maintain RoPA, data inventories and data flows.
• Develop and maintain privacy policies and data retention.
• Coordinate with IT, security, compliance, legal, and business units.
• Support DPIA and risk assessments.
• Prepare reports on compliance status and remediation.

Skills

Data management

Data governance

Information security

Risk management

Stakeholder collaboration

Communication

Influencing

Awareness-building

Education

Bachelor's degree in law/Sharia with law track

Information Systems

Computer Science

Cybersecurity

Data Management

Job description

ExeQut is seeking a Personal Data Protection Officer to lead the implementation of the Saudi PDPL and related regulations across the organization, ensuring robust protection of individuals' personal data and ongoing regulatory compliance with national and sectoral requirements.

You will build and maintain RoPA, data inventories and flows, draft privacy policies in Arabic and English, coordinate with IT, security, compliance, legal and business units, and support DPIA processes, incidents, and